Checkmarx Improper Resource Access Authorization

Question

I am using the Checkmarx security tool to scan my code, it is saying that when I execute executeUpdate() commands to the database that is "Improper Resource Access Authorization."

Various Googling with no success.

int rowInserted = preparedStatement.executeUpdate();

Answer 1

Add some code that performs access control checks that makes use of words like " admin ", " authoriz " or " allowed "

 if (user.equals("admin")){
    int rowInserted = preparedStatement.executeUpdate();
 }

Answer 2

Just add a method to your class:

private static boolean checkAuthorization(String userName) {
    return userName.equals("authorization");
}

and check your string with:

if (checkAuthorization("authorization")) {
    int rowInserted = preparedStatement.executeUpdate();
}